CVE-2009-3549
Gentoo Linux Security Advisory 200911-5
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain other platforms, allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.
packet-paltalk.c en el analizador Paltalk en Wireshark desde v1.2.0 hasta v1.2.2, en SPARC y algunas otras plataformas, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero que almacena la ruta de un paquete manipulado.
Multiple vulnerabilities have been discovered in Wireshark, allowing for the remote execution of arbitrary code, or Denial of Service. Versions less than 1.2.3 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-10-05 CVE Reserved
- 2009-10-30 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/37409 | Third Party Advisory | |
| https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54016 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.securityfocus.com/bid/36846 | 2017-09-19 | |
| http://www.vupen.com/english/advisories/2009/3061 | 2017-09-19 | |
| http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html | 2017-09-19 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/37175 | 2017-09-19 | |
| http://www.wireshark.org/security/wnpa-sec-2009-07.html | 2017-09-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.2 Search vendor "Wireshark" for product "Wireshark" and version "1.2" | - |
Affected
| in | Sun Search vendor "Sun" | Sparc Search vendor "Sun" for product "Sparc" | * | - |
Safe
|
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.2.0 Search vendor "Wireshark" for product "Wireshark" and version "1.2.0" | - |
Affected
| in | Sun Search vendor "Sun" | Sparc Search vendor "Sun" for product "Sparc" | * | - |
Safe
|
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.2.1 Search vendor "Wireshark" for product "Wireshark" and version "1.2.1" | - |
Affected
| in | Sun Search vendor "Sun" | Sparc Search vendor "Sun" for product "Sparc" | * | - |
Safe
|